magab2[.]com

PhishDestroy identifies magab2.com as a generic phishing threat with an elevated risk level. This domain was designed to impersonate the well-known Brazilian retailer Magazine Luiza, as evidenced by its page title. The site is now offline, but while active, it likely aimed to steal login credentials or personal information from unsuspecting visitors. The elevated risk rating reflects the domain's clear malicious intent and the multiple security signals that flagged it.

Technical indicators paint a damning picture. VirusTotal reports that 17 out of 95 security vendors flag this domain as malicious, a significant detection rate. The domain appears on two security blocklists and was found in 15 threat intelligence pulses on AlienVault OTX. Registered on December 10, 2025, through Amazon Registrar, Inc., it resolves to IP address 3.171.76.50, which is associated with Amazon Web Services. The SSL certificate is issued by Amazon / Amazon RSA 2048 M01, a legitimate certificate authority, but this only means the connection is encrypted, not that the site is safe. The domain's creation date is very recent, a common trait among phishing sites.

Users who may have encountered this site should take immediate action. If any credentials were entered on magab2.com, change those passwords immediately for the affected account, especially if the same password is used elsewhere. Enable two-factor authentication on all important accounts. Monitor financial statements and online accounts for any unauthorized activity. As a general rule, always verify the authenticity of any site asking for personal information, especially if it imitates a known brand. Use PhishDestroy's database to check the safety of suspicious domains before interacting with them.